[tor-dev] memcmp() & co. timing info disclosures?

[Robert Ransom]

On Fri, 6 May 2011 22:11:06 -0700
Chris Palmer <chris at eff.org> wrote:

> On May 6, 2011, at 8:53 PM, Robert Ransom wrote:

> > GCC is likely to turn (v1 == v2) into a backdoor.
> 
> Can you explain what you mean?

I would expect GCC (and most other C compilers) to use a
non-constant-time implementation of (v1 == v2).


Robert Ransom
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-dev/attachments/20110506/8e6cff01/attachment.pgp>